<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T02:47:09.794536+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2026:47079</id>
    <title>ALSA-2026:47079 — Important: libXfont2 security update</title>
    <updated>2026-10-03T02:47:10.168263+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:10: libXfont2, AlmaLinux:10: libXfont2-devel</p>
<p>X.Org X11 libXfont2 runtime library</p>
<p>Security Fix(es):</p>
<p>* libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
  * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2026:47079"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2026-56002</id>
    <title>BELL-CVE-2026-56002</title>
    <updated>2026-10-03T02:47:10.168330+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p><strong>Affected:</strong> Alpaquita:23: libxfont2, Alpaquita:25: libxfont2, Alpaquita:stream: libxfont2</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2026-56002"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2026-avi-0873</id>
    <title>certfr-2026-avi-0873 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque…</title>
    <updated>2026-10-03T02:47:10.168356+00:00</updated>
    <content>certfr-2026-avi-0873</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2026-avi-0873"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-335158</id>
    <title>EUVD-2026-335158</title>
    <updated>2026-10-03T02:47:10.168373+00:00</updated>
    <content>EUVD-2026-335158</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-335158"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-56002</id>
    <title>fkie_cve-2026-56002</title>
    <updated>2026-10-03T02:47:10.168385+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-56002"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-r49w-hq6h-2w8q</id>
    <title>GHSA-r49w-hq6h-2w8q</title>
    <updated>2026-10-03T02:47:10.168406+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-r49w-hq6h-2w8q"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2026-56002</id>
    <title>msrc_CVE-2026-56002 — libXfont2 PCF Font Parsing Heap Buffer Overflow</title>
    <updated>2026-10-03T02:47:10.168421+00:00</updated>
    <content>msrc_CVE-2026-56002</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2026-56002"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2026-3055</id>
    <title>OESA-2026-3055 — libXfont2 security update</title>
    <updated>2026-10-03T02:47:10.168437+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libXfont2, openEuler:24.03-LTS-SP1: libXfont2, openEuler:24.03-LTS-SP3: libXfont2, openEuler:24.03-LTS-SP4: libXfont2, openEuler:20.03-LTS-SP4: libXfont2</p>
<p>libXfont provides the core of the legacy X11 font system, handling the index files (fonts.dir, fonts.alias, fonts.scale), the various font file formats, and rasterizing them.  contains runtime  library.

Security Fix(es):</p>
<p>A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server context.(CVE-2026-56001)</p>
<p>A heap buffer overflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)</p>
<p>A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.(CVE-2026-56003)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2026-3055"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2026:11233-1</id>
    <title>openSUSE-SU-2026:11233-1 — libXfont2-2-2.0.7-2.1 on GA media</title>
    <updated>2026-10-03T02:47:10.168471+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libXfont2-2-2.0.7-2.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2026:11233-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2026:51058</id>
    <title>RHSA-2026:51058 — Red Hat Security Advisory: libXfont2 security update</title>
    <updated>2026-10-03T02:47:10.168489+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow libXfont2: PCF Font Parsing Heap Buffer Overflow libXfont2: computeProps Property Buffer Heap Buffer Overflow</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2026:51058"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rlsa-2026:47079</id>
    <title>RLSA-2026:47079 — Important: libXfont2 security update</title>
    <updated>2026-10-03T02:47:10.168507+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Rocky Linux:10: libXfont2</p>
<p>X.Org X11 libXfont2 runtime library</p>
<p>Security Fix(es):</p>
<p>* libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)</p>
<p>* libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rlsa-2026:47079"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2026:22614-1</id>
    <title>SUSE-SU-2026:22614-1 — Security update for libXfont2</title>
    <updated>2026-10-03T02:47:10.168529+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for libXfont2</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2026:22614-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56002</id>
    <title>UBUNTU-CVE-2026-56002</title>
    <updated>2026-10-03T02:47:10.168546+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libxfont, Ubuntu:Pro:16.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont2, Ubuntu:Pro:18.04:LTS: libxfont, Ubuntu:Pro:20.04:LTS: libxfont, Ubuntu:22.04:LTS: libxfont, Ubuntu:24.04:LTS: libxfont, Ubuntu:25.10: libxfont, Ubuntu:26.04:LTS: libxfont</p>
<p>A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56002"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2378</id>
    <title>WID-SEC-W-2026-2378 — X.Org X11 Server (libXfont2): Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrato…</title>
    <updated>2026-10-03T02:47:10.168576+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um erweiterte Berechtigungen zu erlangen und beliebigen Code mit Root-Rechten auszuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2378"/>
  </entry>
</feed>
